v3.73.0

FEATURES:

• New Resource: google_compute_service_attachment (#3328)
• New Resource: google_dialogflow_cx_agent (#3324)
• New Resource: google_gkehub_feature (#3330)
• New Resource: google_gkehub_feature_membership (#3330)

IMPROVEMENTS:

• provider: added support for mtls authentication (#3348)
• compute: added field adaptive_protection_config to google_compute_security_policy (#3322)
• compute: added advanced_machine_features fields to google_compute_instance_template (#3337)
• compute: added a network_performance_config block to each of resource_compute_instance, resource_compute_instance_from_template, and resource_compute_instance_template (#3341)
• redis: allowed redis_version to be upgraded on google_redis_instance (#3344)

BUG FIXES:

• apigee: added SLASH_23 support for peering_cidr_range on google_apigee_instance (#3327)
• cloudrun: fixed a bug where plan would should a diff on google_cloud_run_service if the order of the template.spec.containers.env list was re-ordered outside of terraform. (#3326)
• container: added user_project_override support to the ContainerOperationWaiter used by google_container_cluster (#3345)

3.72.0

IMPROVEMENTS:

• container: Allowed specifying a cluster id field for google_container_node_pool.cluster to ensure that a node pool is recreated if the associated cluster is recreated. (#3314)
• storagetransfer: added support for azure_blob_storage_data_source to google_storage_transfer_job (#3316)

BUG FIXES:

• bigquery: Fixed google_bigquery_table.schema handling of policyTags (#3307)
• bigtable: fixed bug that would error if creating multiple bigtable gc policies at the same time (#3311)
• compute: fixed bug where encryption showed a perma-diff on resources created prior to the feature being released. (#3309)
• dataflow: fixed handling of failed google_dataflow_flex_template_job updates (#3318)
• dataflow: made google_dataflow_flex_template_job updates fail fast if the job is in the process of cancelling or draining(#3317)

v3.71.0

FEATURES:

• New Resource: google_dialogflow_fulfillment (#3286)

IMPROVEMENTS:

• compute: added reservation_affinity to google_compute_instance and google_compute_instance_template (#3288)
• compute: added support for wait_for_instances_status on google_compute_instance_group_manager and google_compute_region_instance_group_manager (#3283)
• compute: added support for output-only status field on google_compute_instance_group_manager and google_compute_region_instance_group_manager (#3283)
• compute: set the default value for log_config.enable on google_compute_region_health_check to avoid permanent diff on plan/apply. (#3291)

BUG FIXES:

• composer: fixed a check that did not allow for preview versions in google_composer_environment (#3287)
• storage: fixed error when matches_storage_class is set empty on google_storage_bucket (#3282)
• vpcaccess: fixed permadiff when max_throughput is not set on google_vpc_access_connector (#3294)

v3.70.0

IMPROVEMENTS:

• compute: added provisioned_iops to google_compute_disk (#3269)
• sql: added field disk_autoresize_limit to sql_database_instance (#3273)

BUG FIXES:

• cloudrun: fixed a bug where resources would return successfully due to responses based on a previous version of the resource (#3277)
• compute: fixed issue where google_compute_region_disk and google_compute_disk would force recreation due to the addition of interface property (#3272)
• compute: fixed missing values for negative_caching and serve_while_stale on google_compute_backend_service (#3278)
• storage: fixed error when matches_storage_class is set empty on google_storage_bucket (#3282)

v3.69.0

IMPROVEMENTS:

• apigateway: allowed field apiconfig to change on resource google_apigateway_gateway (#3248)
• compute: added "description" field to "google_compute_resource_policy" resource (#3263)
• compute: added "instance_schedule_policy" field to "google_compute_resource_policy" resource (#3263)
• compute: added support for IPsec-encrypted Interconnect in the form of new fields on google_compute_router, google_compute_ha_vpn_gateway, google_compute_interconnect_attachment and google_compute_address (#3256)
• dataflow: enabled updates for google_dataflow_flex_template_job (#3246)

BUG FIXES:

• cloudidentity: fixed recreation on the initial_group_config of google_cloud_identity_group (#3252)
• compute: added mutex in google_compute_metadata_item to reduce retries + quota errors (#3262)
• container: fixed bug where enable_shielded_nodes could not be false on resource google_container_cluster (#3247)

v3.68.0

FEATURES:

• New Resource: google_pubsub_schema (#3243)

IMPROVEMENTS:

• compute: added initial_size in resource google_compute_node_group to account for scenarios where size may change under the hood (#3228)
• compute: added support for setting kms_key_name on google_compute_machine_image (#3241)
• dataflow: enabled updates for google_dataflow_flex_template_job (#3246)

BUG FIXES:

• compute: Fixed permadiff for cdn_policy.serve_while_stale and cdn_policy.*_ttl in google_compute_region_backend_service (beta) (#3230)
• compute: fixed bug where, when an organization security policy association was removed outside of terraform, the next plan/apply would fail. (#3234)
• container: added validation to check that both node_version and remove_default_node_pool cannot be set on google_container_cluster (#3237)
• dns: suppressed spurious diffs due to case changes in DS records (#3236)

v3.67.0

NOTES:

• all: changed default HTTP request timeout from 30 seconds to 120 seconds (#3181)
  BREAKING CHANGES:
• bigquery: updating dataset_id or project_id in google_bigquery_dataset will now recreate the resource (#3185)

IMPROVEMENTS:

• accesscontextmanager: added support for require_verified_chrome_os in basic access levels. (#3223)
• billingbudget: added support for import of google_billing_budget (#3194)
• cloud_identity: added support for initial_group_config to the google_cloud_identity_group resource (#3211)
• cloudrun: added support to bind secrets from Secret Manager to environment variables or files to google_cloud_run_service (#3225)
• compute: added initial_size to account for scenarios where size may change under the hood in resource google_compute_node_group (#3228)
• compute: added interface field to google_compute_region_disk (#3193)
• healthcare: added support for stream_configs in google_healthcare_dicom_store (#3190)
• secretmanager: added support for setting a CMEK on google_secret_manager_secret (#3212)
• spanner: added force_destroy to google_spanner_instance to delete instances that have backups enabled. (#3227)
• spanner: added support for setting a CMEK on google_spanner_database (#3181)
• workflows: marked source_contents and service_account as updatable on google_workflows_workflow (#3205)

BUG FIXES:

• bigquery: fixed dataset_id to force new resource if name is changed. (#3185)
• cloudrun: fixed permadiff on google_cloud_run_domain_mapping.metadata.labels (#3183)
• composer: changed google_composer_environment.master_ipv4_cidr_block to draw default from the API (#3204)
• compute: fixed the failure when min_required_replicas is set to 0 on google_compute_autoscaler or google_compute_region_autoscaler (#3203)
• container: fixed container node pool not removed from the state when received 404 error on delete call for the resource google_container_node_pool (#3210)
• dns: fixed empty rrdatas list on google_dns_record_set for AAAA records (#3207)
• kms: fixed indirectly force replacement via skip_initial_version_creation on google_kms_crypto_key (#3192)
• logging: fixed metric_descriptor.labels can't be updated on 'google_logging_metric' (#3217)
• pubsub: fixed diff for minimum_backoff & maximum_backoff on google_pubsub_subscription (#3214)
• resourcemanager: fixed broken handling of IAM conditions for google_organization_iam_member, google_organization_iam_binding, and google_organization_iam_policy (#3213)
• serviceusage: added google_project_service.service validation to reject invalid service domains that don't contain a period (#3191)
• storage: fixed bug where role_entity user wouldn't update if the role changed. (#3199)

v3.66.1

BUG FIXES:

• compute: fixed bug where terraform would crash if updating from no service_account.scopes to more. (#3208)

v3.66.0

NOTES:

• all: changed default HTTP request timeout from 30 seconds to 120 seconds (#3181)

BREAKING CHANGES:

• datacatalog: updating parent in google_data_catalog_tag will now recreate the resource (#3179)

FEATURES:

• New Data Source: google_compute_ha_vpn_gateway (#3173)
• New Resource: google_dataproc_workflow_template (#3178)

IMPROVEMENTS:

• bigquery: Added BigTable source format in BigQuery table (#3165)
• cloudfunctions: removed bounds on the supported memory range in google_cloudfunctions_function.available_memory_mb (#3171)
• compute: marked scheduling.0.node_affinities as updatable in google_compute_instance (#3166)
• dataproc: added shielded_instance_config fields to google_dataproc_cluster (#3157)
• spanner: added support for setting a CMEK on google_spanner_database (#3181)

BUG FIXES:

• compute: fixed error when creating empty scopes on google_compute_instance (#3174)
• container: fixed a bug that allowed specifying node_config on google_container_cluster when autopilot is used (#3155)
• datacatalog: fixed an issue where parent in google_data_catalog_tag attempted to update the resource when change instead of recreating it (#3179)
• datacatalog: set default false for force_delete on google_data_catalog_tag_template (#3164)
• dns: added missing record types to google_dns_record_set resource (#3160)
• sql: set clone.point_in_time optional for google_sql_database_instance (#3180)

v3.65.0

FEATURES:

• New Data Source: google_kms_secret_asymmetric (#3141)

IMPROVEMENTS:

• compute: added the ability to specify google_compute_forwarding_rule.ip_address by a reference in addition to raw IP address (#3140)
• compute: enabled fields advertiseMode, advertisedGroups, peerAsn, and peerIpAddress to be updatable on resource google_compute_router_peer (#3134)
• eventarc: added transport.pubsub.topic to google_eventarc_trigger (#3149)

BUG FIXES:

• cloud_identity: fixed google_cloud_identity_group_membership import/update (#3136)
• compute: removed minimum for scopes field on google_compute_instance resource (#3147)
• iam: fixed issue with principle and principleSet members not retaining their casing (#3133)
• workflows: fixed a bug in google_workflows_workflow that could cause inconsistent final plan errors when using the name field in other resources (#3138)